deckhearth/.convoys/purge-quick-login-from-loginpage.md

27 lines
698 B
Markdown
Raw Normal View History

---
name: purge-quick-login-from-loginpage
classification: fix
success_metric: |
pages/login.js no longer ships alice123/bob123 in client HTML; smoke sign-in
CTA unchanged.
status: closed
created: 2026-05-26
closed: 2026-05-29
pr: pending
---
# Convoy: purge-quick-login-from-loginpage
Remove production Quick Login buttons that exposed test-user passwords in
view-source HTML.
## Scope
- Delete Quick Login section + `handleQuickLogin` from `pages/login.js`
- Regression test: no quick-login copy or password literals in rendered output
## Out of scope
- Rotating alice/bob DB hashes (operators rotate manually if needed)
- `TESTING_GUIDE.md` dev account table (local QA reference only)